CVE Feed

    Dashboard / CVE / CVE-2017-3865

    CVE-2017-3865

    A vulnerability in the IPsec component of Cisco StarOS for Cisco ASR 5000 Series Routers could allow an unauthenticated, remote attacker to terminate all active IPsec VPN tunnels and prevent new tunnels from establishing, resulting in a denial of service (DoS) condition. Affected Products: ASR 5000 Series Routers, Virtualized Packet Core (VPC) Software. More Information: CSCvc21129. Known Affected Releases: 21.1.0 21.1.M0.65601 21.1.v0. Known Fixed Releases: 21.2.A0.65754 21.1.b0.66164 21.1.V0.66014 21.1.R0.65759 21.1.M0.65749 21.1.0.66030 21.1.0.

    Published:Jul 4, 2017
    Last Modified:Apr 20, 2025
    EPS:Jul 4, 2017
    EPSS Score:0.0082
    CVSS Score:5.8

    Affected Products

    Vendor
    Cisco
    Product
    Staros

    Exploits

    No exploit reference

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2025-32433 (CVSS 10) — Erlang/OTP is a set of libraries for the Erlang programming language. Prior to versions OTP-27.3.3, OTP-26.2.5…
    CVE-2023-20046 (CVSS 8.8) — A vulnerability in the key-based SSH authentication feature of Cisco StarOS Software could allow an authentica…
    CVE-2022-20665 (CVSS 6) — A vulnerability in the CLI of Cisco StarOS could allow an authenticated, local attacker to elevate privileges …
    CVE-2021-1540 (CVSS 8.1) — Multiple vulnerabilities in the authorization process of Cisco ASR 5000 Series Software (StarOS) could allow a…
    CVE-2021-1539 (CVSS 8.1) — Multiple vulnerabilities in the authorization process of Cisco ASR 5000 Series Software (StarOS) could allow a…
    CVE-2021-1378 (CVSS 5.3) — A vulnerability in the SSH service of the Cisco StarOS operating system could allow an unauthenticated, remote…
    CVE-2021-1353 (CVSS 5.8) — A vulnerability in the IPv4 protocol handling of Cisco StarOS could allow an unauthenticated, remote attacker …
    CVE-2021-1145 (CVSS 6.5) — A vulnerability in the Secure FTP (SFTP) of Cisco StarOS for Cisco ASR 5000 Series Routers could allow an auth…
    CVE-2020-3602 (CVSS 6.3) — A vulnerability in the CLI of Cisco StarOS operating system for Cisco ASR 5000 Series Routers could allow an a…
    CVE-2020-3601 (CVSS 4.4) — A vulnerability in the CLI of Cisco StarOS operating system for Cisco ASR 5000 Series Routers could allow an a…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High